State-based intercept of interactive communications network connections for provision of targeted, status-based messaging

RELATED APPLICATIONS

0001This application claims the benefit of the earlier filing date under 35 U.S.C. § 119(e) of U.S. Provisional Application Ser. No. 61/990,081 (filed 2014 May 7).

BACKGROUND

0002A general communications network comprises a collection of terminal nodes networked together via communications links and intermediate nodes to facilitate message and data communications between or amongst the terminal nodes. For example, a computer network is a communications network of computer terminal nodes networked together via communications links and intermediate nodes to facilitate data exchanges between or amongst the computer terminal nodes. Further, a wide area network (WAN) is a computer network that spans or covers a broad area (e.g., a communications network that spans across metropolitan or regional areas). The Internet is an interactive global system of interconnected computer networks.

0003In computer networking, a “port” serves as an application-specific or process-specific software construct serving as a communications network endpoint of a terminal node, which is associated with an IP address of the host node and the specific communications protocol. A computer terminal of a network may share a single physical connection to the network (e.g., a packet-switched network, such as the Internet), and each port of the computer uniquely identifies a respective different application or process running on the computer. Certain transport layer protocols of the Internet (e.g., Transmission Control Protocol (TCP) and User Datagram Protocol (UDP)) reflect protocols that primarily use ports that are identified for each address and protocol by a port number. The port number, along with the IP address of the host computer, form the destination address for a communications session. For example, data packets are routed across the network to a specific destination IP address for the host computer, and then to the specific destination port number associated with the respective process or application of the host computer.

0004TCP is a core protocol of the Internet protocol (IP) suite, which provides reliable, ordered and error-checked delivery of a stream of packets between programs running on computers connected to the Internet. Web browsers use TCP when they connect to servers on the Internet, and it is used to deliver email and transfer files from one location to another. To establish a connection, TCP uses a three-way handshake. The server to which the client connects binds to and listen at one or more ports for TCP connections. To establish a TCP connection, the client first transmits a TCP synchronize message (SYN) to the server. The client sets a random value A as the sequence number for the SYN segment. Upon receiving the TCP SYN message, the server replies with a synchronize acknowledge (SYN-ACK) message. The server sets a sequence number for the acknowledgment segment to the value of the SYN sequence number plus one (A+1), and sets another random number B as the sequence number for the SYN-ACK packet. Finally, upon receiving the SYN-ACK, the client replies with an acknowledge (ACK) message back to the server. The client sets a sequence number for the ACK segment to the same value of the received SYN-ACK segment (A+1), and sets the sequence number for the ACK packet to the sequence number value of the SYN-ACK packet plus one (B+1). At this point, both the client and server have received an acknowledgment of the connection, and a full-duplex communications connection is established. The first and second steps (the SYN and SYN-ACK steps) establish the connection parameter (sequence number) for one direction and it is acknowledged. The second and third steps (the SYN-ACK and ACK steps) establish the connection parameter (sequence number) for the other direction and it is acknowledged. Resources (e.g., web servers and services) connected to the Internet are identified via the Domain Name System (DNS), which serves as a hierarchical distributed naming system. The DNS associates various information with respective domain names assigned to Internet resource entities. For example, the Internet DNS associates domain names to respective associated numerical IP addresses for the targeted or destination resources connected to the Internet.

0005Web pages accessed over the Internet are generally serviced via Hypertext Transfer Protocol (HTTP) and Hypertext Transfer Protocol Secure (HTTPS), which function as request-response protocols for interactive communication over computer networks (HTTPS providing secure network communications). Further, HTTP and HTTPS function as client-server based communications protocols, where, for example, a web-browser application running on a one terminal node serves as the client node, and a web-site hosted on another terminal node serves as the server node. Web pages serviced by HTTP or HTTPS typically utilize ports <b>80</b> and <b>443</b>. Simple Mail Transfer Protocol (SMPT) is a network protocol for electronic mail (e-mail) transmission, Post Office Protocol (POP3) is an application-layer network protocol used by local e-mail clients to retrieve e-mail from a remote server, and Internet Message Access Protocol (IMAP) is a network protocol for e-mail retrieval and storage. Further, File Transfer Protocol (FTP) is a network protocol used to transfer computer files from one network host to another, Secure Shell (SSH) is a cryptographic network protocol for initiating secure text-based shell sessions on remote network hosts, and Telnet is an application protocol used to provide a bidirectional interactive text-oriented communication facility over a network. HTTP, HTTPS, SMTP, POP3, IMAP, SSH, FTP, Telnet and a variety of other protocols are typically employed over TCP-based networks, such as the Internet, and are thus encapsulated in TCP. When a user node (e.g., a computer terminal node running a web browser) seeks to access a web page, the following steps are involved: (1) a DNS request to obtain the IP address for the hosting node (the IP address is returned via a DNS response); (2) a TCP request to the IP address obtained via the DNS response on the appropriate port; and (3) a GET request, within the HTTP of HTTPS portion of the protocol running over TCP, containing a user agent string providing information regarding the device making the request.

0006Web page data is typically transferred transparently through a customer premise WAN device (e.g., a terminal node) without interception. Exceptions, however, exist where data may be intercepted, such as (a) when all traffic is captured such as in a login case for a guest or pay network (e.g., a WiFi network) and (b) where acceleration is applied to the web page data, providing the original content in a performance enhanced manner. Further, terminals often host their own HTTP/HTTPS pages for a specific domain name or IP address associated with the LAN port of that terminal. Such pages are served to the requesting browser application independently of the access of other HTTP/HTTPS pages on the Internet.

0007In various instances, when operating and providing a communications service (e.g., an Internet service provider (ISP) service), there is a desire or need to provide specific or targeted messaging to the end user, for example, based on an associated status of the network or user account (e.g., messages regarding the state of the network, the state of the local terminal, or status information regarding the user account). Currently, such messaging is primarily provided via one of the following methods: (1) the user receives the message when going to the HTTP/HTTPS server of the terminal; (2) the user receives the message via an email communication; (3) a user web page request is redirected by a central device; or (4) the user accesses the message on a message board or other HTTP/HTTPS server hosted by the ISP. These methods, however, are subject to various deficiencies and inefficiencies. For example, in the case of receiving the messaging via the HTTP/HTTPS server of the terminal or other server hosted by the ISP, the user may access such resources on a very infrequent basis, and thus the ISP cannot be assured of prompt or reliable delivery. Further, in the case of email delivery, email messaging is not real-time, and thus the ISP cannot be assured of prompt delivery in conjunction with an associated status that may be the topic of the messaging. Moreover, in the cases of an HTTP/HTTPS server of the terminal, email messaging, redirection by a central device and messaging via a server hosted by the ISP, such methods require an active and properly functioning WAN connection, and thus (especially with respect to messaging regarding network status, such as a network outage) such messaging would not reach the user in a timely fashion.

0008What is needed, therefore, is an approach for reliable and timely provision of targeted, status-based messaging to a user-terminal node in a computer network, such as a wide area resource-based network (e.g., the Internet).

0000Some Example Embodiments

0009Embodiments of the present invention advantageously address the foregoing requirements and needs, as well as others, by providing an approach for reliable and timely provision of targeted, status-based messaging to a user-terminal node in a computer network, such as a wide area resource-based network (e.g., the Internet).

0010In accordance with example embodiments of the present invention, TCP connections to certain ports (e.g., nominally ports <b>80</b> and <b>443</b>) are intercepted for the provision of targeted, status-based messaging when certain circumstances associated with the messaging are present, and when certain additional conditions are met (e.g., a timer condition or other predefined condition meeting certain criteria, such as a periodic connection of a predefined period, etc.). In accordance with further example embodiments, such messaging may also be restricted to interactive connections by determining that there is a GET message from a user agent string that is likely to be a browser, which (in addition to providing a better opportunity for actually getting interactive web traffic versus non-interactive web traffic) provides benefits over DNS based solutions, because the customer premise WAN device sees all TCP traffic, but may not see a DNS request if the host terminal or a premise router performs DNS caching. By way of example, scenarios where a web request (e.g., a request on port <b>80</b>, <b>443</b> or other configured port) would be intercepted to provide such targeted, status-based messaging include: (1) Account Volume State—when a user account is approaching or has exceeded a data quota, such as a maximum data volume plan; (2) Maintenance—when a planned outage is scheduled; (3) Outage—when the WAN link is currently out or degraded; and (4) Account State—when key information about a user account needs to be proactively communicated.

0011In accordance with example embodiments, a method comprises receiving, by a terminal node, a message originating from a client terminal, wherein the terminal node serves as an entry point to, and services data communications connections over, a wide area network (WAN) for the client terminal. It is determined that the message comprises an initiation request for establishing a data communications connection over the wide area network between the client terminal and a remote server, and that an intercept state is in effect. The data communications connection is established as a local connection between the client terminal and the terminal node. The data communications connection is serviced via a local server function, wherein the servicing of the data communications connection via the local server function comprises a provision of status-based messaging to the client terminal. By way of example, the status based messaging comprises information regarding one or more of status of potential communications links between the client terminal and the WAN, status of the WAN, status of a subscription or other account associated with the client terminal, promotions or other services or items of interest relevant to a subscriber associated with the client terminal, and other issues relevant to the client terminal or to a subscriber associated with the client terminal. According to a further aspect, upon determining that the intercept state is in effect, it is determined that a port associated with the requested data communications connection is configured as a port subject to the intercept state. According to a further aspect, upon determining that the intercept state is in effect, it is determined that an intercept frequency parameter is satisfied. Further, upon determining that the intercept frequency parameter is satisfied, it is determined that a port associated with the requested data communications connection is configured as a port subject to the intercept state.

0012In accordance with further embodiments of the method, upon establishing the data communications connection as a local connection between the client terminal and the terminal node, a protocol session is established over the data communications connection. A further message is received from the client terminal via the protocol session requesting a service associated with the remote server. The method then proceeds with the servicing of the data communications connection via the local server function. According to a further aspect, upon receiving the further message from the client terminal via the protocol session requesting the service associated with the remote server, it is determined that the requested service is an interactive service. The method then proceeds with the servicing of the data communications connection via the local server function.

0013In accordance with further embodiments of the method, upon establishing the data communications connection as a local connection between the client terminal and the terminal node, a protocol session is established over the data communications connection, and a further message originating from the client terminal is received via the protocol session. It is then determined whether the further message comprises a request for a particular service associated with the remote server. If it is determined that the further message does not comprise the request for the particular service, then the method further comprises routing the data communications connection to the remote server as originally requested. Otherwise, if it is determined that the further message comprises the request for the particular service, then the method further comprises proceeding with the servicing of the data communications connection via the local server function. According to a further aspect, if it is determined that the further message comprises the request for the particular service, before proceeding with the servicing of the data communications connection via the local server function, the method further comprises determining whether the service is an interactive service. If it is determined that the service is not an interactive service, then the method further comprises routing the data communications connection to the remote server as originally requested. Otherwise, if it is determined that the service is an interactive service, then the method proceeds with the servicing of the data communications connection via the local server function.

0014In accordance with example embodiments, a communications terminal node comprises a receiver configured to receive a message originating from a client terminal, wherein the terminal node serves as an entry point to, and services data communications connections over, a wide area network (WAN) for the client terminal; and a communications processor configured to determine that the message comprises an initiation request for establishing a data communications connection over the wide area network between the client terminal and a remote server, and to determine that an intercept state is in effect. Upon determining that the message comprises the initiation request and that the intercept state is in effect, the communications processor is configured to establish the data communications connection as a local connection between the client terminal and the terminal node, and to service the data communications connection via a local server function, wherein the servicing of the data communications connection via the local server function comprises a provision of status-based messaging to the client terminal. By way of example, the status based messaging comprises information regarding one or more of status of potential communications links between the client terminal and the WAN, status of the WAN, status of a subscription or other account associated with the client terminal, promotions or other services or items of interest relevant to a subscriber associated with the client terminal, and other issues relevant to the client terminal or to a subscriber associated with the client terminal. According to a further aspect, upon determining that the intercept state is in effect, the communications processor is configured to determine that a port associated with the requested data communications connection is configured as a port subject to the intercept state. According to a further aspect, upon determining that the intercept state is in effect, the communications processor is configured to determine that an intercept frequency parameter is satisfied. Further, upon determining that the intercept frequency parameter is satisfied, the communications processor is configured to determine that a port associated with the requested data communications connection is configured as a port subject to the intercept state.

0015In accordance with further embodiments of the terminal node, upon establishing the data communications connection as a local connection between the client terminal and the terminal node, the communications processor is configured to establish a protocol session over the data communications connection, and the receiver is configured to receive a further message from the client terminal via the protocol session requesting a service associated with the remote server. Upon the receipt of the further message requesting the service associated with the remote server, the communications processor is configured to proceed with the servicing of the data communications connection via the local server function. According to a further aspect, upon receiving the further message from the client terminal via the protocol session requesting the service associated with the remote server, the communications processor is configured to determine that the requested service is an interactive service, and to then proceed with the servicing of the data communications connection via the local server function.

0016In accordance with further embodiments of the terminal node, upon establishing the data communications connection as a local connection between the client terminal and the terminal node the communications processor is configured to establish a protocol session over the data communications connection, and the receiver is configured to receive a further message originating from the client terminal via the protocol session. Upon the receipt of the further message originating from the client terminal via the protocol session, the communications processor is configured to determine whether the further message comprises a request for a particular service associated with the remote server. If the communications processor determines that the further message does not comprise the request for the particular service, then the communications processor is configured to route the data communications connection to the remote server as originally requested. Otherwise, if the communications processor determines that the further message comprises the request for the particular service, then the communications processor is configured to proceed with the servicing of the data communications connection via the local server function. According to a further aspect, if the communications processor determines that the further message comprises the request for the particular service, before proceeding with the servicing of the data communications connection via the local server function, the communications processor is configured to determine whether the service is an interactive service. If the communications processor determines that the service is not an interactive service, then the communications processor is configured to route the data communications connection to the remote server as originally requested. Otherwise, if the communications processor determines that the service is an interactive service, then the communications processor is configured to proceed with the servicing of the data communications connection via the local server function.

0017Still other aspects, features, and advantages of embodiments of the present invention are readily apparent from the following detailed description, simply by illustrating a number of particular embodiments and implementations, including the best mode contemplated for carrying out the present invention. The present invention may be realized via other and different embodiments, and its several details can be modified in various obvious respects, all without departing from the spirit and scope of the present invention. Accordingly, the drawing and description are to be regarded as illustrative in nature, and not as restrictive.

BRIEF DESCRIPTION OF THE DRAWINGS

Embodiments of the present invention are illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings, in which like reference numerals refer to similar elements and in which:

<figref idref="DRAWINGS">FIG. 1</figref> illustrates a block diagram depicting a computer connection, for accessing a web server via the Internet, including a terminal node for providing reliable targeted, status-based messaging, in accordance with example embodiments of the present invention;

<figref idref="DRAWINGS">FIG. 2</figref> illustrates a block diagram depicting internal configuration of the terminal node for intercepting network connections and providing reliable targeted, status-based messaging (e.g., the terminal node of <figref idref="DRAWINGS">FIG. 1</figref>), in accordance with example embodiments of the present invention;

<figref idref="DRAWINGS">FIGS. 3A and 3B</figref> illustrate flow charts depicting processes for intercepting network connections and providing reliable targeted, status-based messaging, in accordance with example embodiments of the present invention;

<figref idref="DRAWINGS">FIG. 4</figref> illustrates a computer system upon which example embodiments according to the present invention can be implemented; and

<figref idref="DRAWINGS">FIG. 5</figref> illustrates a chip set upon which example embodiments of the present invention may be implemented.

DETAILED DESCRIPTION

0024Approaches for reliable and timely provision of targeted, status-based messaging to user-terminal nodes in a computer network, such as a wide area resource-based network (e.g., the Internet), are described. In the following description, for the purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the present invention. The present invention is not intended to be limited based on the described embodiments, and various modifications will be readily apparent. It will be apparent that the invention may be practiced without the specific details of the following description and/or with equivalent arrangements. Additionally, well-known structures and devices may be shown in block diagram form in order to avoid unnecessarily obscuring the invention. Further, the specific applications discussed herein are provided only as representative examples, and the principles described herein may be applied to other embodiments and applications without departing from the general scope of the present invention.

0025In accordance with example embodiments of the present invention, network connections (e.g., TCP connections) to certain ports (e.g., ports <b>80</b> and <b>443</b>) are intercepted for the provision of targeted, status-based messaging when certain circumstances associated with the messaging are present, and/or when certain additional conditions are met (e.g., a timer condition or other predefined condition meeting certain criteria, such as a periodic connection of a predefined period, etc.). In accordance with further example embodiments, such messaging may also be restricted to interactive connections by detecting a GET message from a user agent string that is likely to be a browser. Provision of messaging in such a manner provides for more reliable detections of interactive web traffic versus non-interactive web traffic, and provides benefits over DNS based solutions, because the customer premise WAN device may see all TCP traffic, but may not see a DNS request if the host terminal or a premise router performs DNS caching. By way of example, scenarios where a web request (e.g., a request on port <b>80</b>, <b>443</b> or other configured port) would be intercepted to provide such targeted, status-based messaging include: (1) Account Volume State—when a user account is approaching or has exceeded a data quota, such as a maximum data volume plan; (2) General Account State—when key information about a user account needs to be proactively communicated; (3) Maintenance—when a planned outage is scheduled; and (4) Outage—when the WAN link is currently out or degraded.

0026<figref idref="DRAWINGS">FIG. 1</figref> illustrates a block diagram <b>100</b> depicting a computer connection, for accessing a web server via the Internet, including a terminal node for providing reliable targeted, status-based messaging, in accordance with example embodiments of the present invention. The user terminals or computers <b>112</b><i>a</i>, <b>112</b><i>b</i>, . . . , <b>112</b><i>n </i>may, for example, host web browser applications for accessing the web servers <b>118</b><i>a</i>, <b>118</b><i>b</i>, . . . , <b>118</b><i>n </i>over the wide area network (WAN) <b>116</b> (e.g., the Internet). The terminals <b>112</b><i>a</i>, <b>112</b><i>b</i>, . . . , <b>112</b><i>n </i>access the WAN <b>116</b> via a terminal node <b>114</b> (e.g., a router or satellite terminal). By way of example, the terminal node <b>114</b> may be a local node of an enterprise network (e.g., local area network (LAN) <b>115</b>) to which the computers <b>112</b><i>a</i>, <b>112</b><i>b</i>, . . . , <b>112</b><i>n </i>belong. In such a scenario, targeted, status-based messaging may be provided by the IT department that controls the enterprise network, to provide associated information regarding network or user account status. By way of further example, the terminal node <b>114</b> may be a terminal node of an Internet service provider (ISP) that provides Internet access to subscribers operating via the terminals <b>112</b><i>a</i>, <b>112</b><i>b</i>, . . . , <b>112</b><i>n</i>. In that case, targeted, status-based messaging may be provided to subscribers by the ISP (e.g., to provide messaging regarding the WAN of the ISP or the subscriber account. Alternatively, another entity may control the terminal node <b>114</b>, and provide other targeted, status-based messaging regarding topics specific to that entity. Further, in either case, the LAN <b>115</b> may alternatively comprise a wide area network or regional network via which an enterprise interconnects user terminals or computers of different offices, or via which an ISP provides Internet services to subscribers of a respective geographical region. As would be recognized, various networking scenarios could be implemented to interconnect the terminal node <b>114</b> to respective remote terminals (user terminals) serviced by the terminal node, without departing from the scope or principles of example embodiments of the present invention.

0027In accordance with example embodiments, approaches for reliable targeted, status-based messaging can thus be provided or facilitated via the terminal node <b>114</b> based on interception of interactive communications, such as HTTP and or HTTPS web requests, and providing the messaging thereby. By way of example, such approaches may include (1) occasional interception of HTTP/HTTPS web requests, and permitting continued operation after delivery of the desired messaging, (2) interception of HTTP/HTTPS web requests when certain circumstances are present (e.g., when the network is in a certain state), and ceasing interception when the circumstances abate, (3) interception of both HTTP and HTTPS web requests, and (4) interception of connections that are determined as likely to be HTTP or HTTPS interactive web requests, and not other non-interactive applications utilizing the same ports.

0028According to certain embodiments, the terminal node <b>114</b> intercepts HTTP/HTTPS web requests only when certain statuses are detected or certain circumstances are determined (e.g., when the network is in a certain state or when certain circumstances exist regarding the respective subscriber account), and ceasing interception when the circumstances abate. To determine whether the associated circumstances are present, the terminal may either be configured to monitor for the respective circumstances, or messaging may be provided to the terminal node to alert it of the pending circumstances. In the second case, such messaging may be provided by a server or other node connected to the network and controlled by the respective ISP or enterprise IT department, where the server or other node are configured to monitor the network and subscriber accounts, and to notify the terminal node accordingly in order to initiate interception of certain communications and to provide the associated messages accordingly. Such target circumstances may comprise any number of conditions with respect to which targeted, status-based subscriber or user messaging may be desired. For example, such circumstances may include (1) determining that a respective WAN link is inoperable or degraded, (2) determining that the user or subscriber account has reached a threshold data usage level with respect to an allotted data volume allowance, (3) determining that the user or subscriber has been placed into a status-class due to non-payment (billing suspension) or other suspensions or network violations, (4) providing notification of current or future network/server maintenance events that could impact service, and (5) and providing notification of promotions or other services or items of interest, which may be applicable to the user or subscriber, being provided by the ISP or the hosting enterprise or other related entities. The terminal node <b>114</b> would be configured to perform an interception/redirection upon determining or being notified of the presence of the respective circumstances (e.g., statuses or states of the network and/or the subscriber account status). Then, once the terminal node <b>114</b> determines that the present state satisfies the conditions for interception, the terminal begins initiation of the interception and messaging process.

0029According to further embodiments, a frequency or timing criteria may also be applied. By way of example, once the terminal node determines that a state or circumstance for interception exists, the terminal applies a frequency or timing factor to determine whether the interception and messaging process should be initiated. By way of example, the terminal node may be configured to perform the interception and messaging at a given point in time after an interactive session (e.g., a web browsing session) has begun via a specific terminal/computer <b>112</b> (or specific identified list of terminals). In such an example, the terminal node may detect the initiation of an interactive session by the terminal <b>112</b><i>a</i>, and thereupon may start a timer. The terminal node may then perform the interception and messaging process based on a certain frequency. In such an example, once the terminal node determines that the state or circumstance for interception exists, before initiating the interception and messaging process, the terminal node determines whether the current point in time satisfies a predetermined frequency criteria. Further, once the state or circumstance for interception arises, the terminal node may be configured to periodically perform the interception and messaging process at the given frequency. For example, the frequency may be a predefined parameter, or may be dynamically configurable by a system operator. Further the interception frequency may follow any of a number of models, such as (1) a probability based model whereby the interception is performed randomly based on a percentage of connections (e.g., randomly intercept only 10% of the TCP connections), (2) a timer based model, intercepting periodically at a predetermined or configurable period (e.g., intercept once every hour as long as the intercept state persists), (3) a deterministic counter based model based on a periodic counter that triggers interception (e.g., intercept once every N TCP connections), (4) a one-time model, intercepting only once during persistence of a given intercept state, and (5) an every-time model, intercepting all TCP connections during persistence of a given intercept state.

0030<figref idref="DRAWINGS">FIG. 2</figref> illustrates a block diagram depicting internal configuration of a terminal node for intercepting network connections and providing reliable targeted, status-based messaging (e.g., the terminal node <b>114</b> of <figref idref="DRAWINGS">FIG. 1</figref>), in accordance with example embodiments of the present invention. Further, <figref idref="DRAWINGS">FIGS. 3A and 3B</figref> illustrate flow charts depicting processes for intercepting network connections and providing reliable targeted, status-based messaging, in accordance with example embodiments of the present invention. According to example embodiments, with reference to <figref idref="DRAWINGS">FIG. 2</figref>, the terminal node <b>114</b> includes an intercept processor <b>201</b>, a Layer 4 switch <b>207</b> and a routing function <b>209</b>. By way of example, the Layer 4 switch comprises a layer 3 switching protocol or technology configured to also determine and consider the type of network traffic (e.g., distinguish between HTTP, FTP or VoIP traffic), where the layer 3 switching protocol or technology would switch based only on the destination IP address contained within the header of IP datagram. Layer 4 switching provides for additional datagram inspection (e.g., reading the port numbers found in the transport layer header, such as TCP or UDP ports) based upon which routing decisions are made. The terminal node <b>114</b> may further include a local HTTP server (or server function) <b>203</b> and a local HTTPS server (or server function <b>205</b>), or alternatively the local HTTP and HTTPS servers (or server functions may be deployed separate from the terminal node <b>114</b>. In either case, the HTTP and HTTPS servers (or server functions) are implemented and controlled by the entity providing the targeted, status-based messaging. According to one embodiment, the terminal node <b>114</b> may be configured to intercept certain communications associated with one or more predetermined or dynamically configurable ports (e.g., TCP connections to the specific port(s), such as ports <b>80</b> and <b>443</b>).

0031According to one embodiment, with reference to <figref idref="DRAWINGS">FIG. 3A</figref>, the terminal node <b>114</b> receives a TCP SYN message from a one of the computer terminals <b>112</b>, via the LAN <b>115</b> (S<b>301</b>). The TCP SYN message is destined for a server based on an IP address that would normally be routed across the WAN. The terminal node then determines whether an intercept state is in effect for that connection (S<b>303</b>). By way of example, in the case of a particular subscriber that has reached a threshold for the respective subscription plan, the terminal node may match the source IP address or other identifying information associated with the subscriber to a database to determine whether the connection is for that subscriber. Alternatively, by way of further example, in the case of a network status that triggers an interception state (e.g., in the case of a network outage or a planned outage for network maintenance regarding which targeted, status-based messaging is desired), the terminal node may determine that certain connections are to be intercepted. For example, the routing function <b>209</b> routes the associated packets to the WAN <b>116</b> uninterrupted. If the terminal node determines that there is an intercept state in effect for that connection, then (in the case of an embodiment where a further frequency factor is employed) the terminal determines whether the intercept frequency factor or criteria is satisfied (S<b>307</b>). If the terminal node determines that the frequency criteria is satisfied for that connection, then the terminal node determines whether the SYN is for a TCP connection with a port that is configured for interception (S<b>309</b>). If the terminal node determines that the SYN is for a TCP port configured for interception, then the terminal node intercepts all future packets of that TCP connection—e.g., the TCP connection is established as between the local LAN device (e.g., the computer terminal <b>112</b>) and the terminal node <b>114</b> as the destination server/port (S<b>311</b>). The terminal node then services the connection for the respective targeted, status-based messaging (S<b>313</b>). If either (in S<b>303</b>) the terminal node determines that there is no intercept state in effect for the connection, or (in S<b>307</b>) the terminal node determines that the intercept frequency factor or criteria is not satisfied for that connection, or (in S<b>309</b>) the terminal node determines that the SYN is not for a TCP port configured for interception, then the SYN message and further messages for the TCP connection will be routed as normal (S<b>305</b>).

0032By way of example, in the case of interception, the terminal node intercepts all future packets for the particular TCP connection and services them locally as if the packets had been addressed directly to the IP address of the terminal node. By way of example, by means of the Layer 4 Switch <b>207</b> the terminal node services all packets for the respective TCP connection as if it were the originally addressed destination server/port number. More specifically, the terminal node brings up the TCP connection and connects it to the appropriate listener application for the port. For example, the terminal node services a connection for port <b>80</b> via the local HTTP server or function <b>203</b>, and services a connection for port <b>443</b> via the local HTTPS server or function <b>205</b>. All communications over the respective TCP connection will thereby be between the LAN device (e.g., the terminal <b>112</b>) and the terminal node <b>114</b>, rather than between the LAN device and the originally specified web server over the WAN or Internet. The respective targeted, status-based messaging is then provided via the respective local HTTP/HTTPS server or function of the terminal node.

0033According to a further embodiment, the terminal node <b>114</b> may be configured to intercept only interactive requests/connections, and thus, prior to initiating interception, the terminal may be further configured to validate that the connection consists of an interactive session. For example, in the case of ports <b>80</b> and <b>443</b>, not every connection to these ports are likely to be interactive sessions (e.g., interactive web page requests) for which the user is intended to receive the respective status-based messaging. Some examples of non-interactive applications that utilize port <b>80</b> and <b>443</b> include telemetry, software updates, virtual private network connections (VPNs), etc., where redirecting to a web server in the terminal will not serve the intended function of the user receiving the respective messaging. Accordingly, the terminal may be configured to determine whether the connection is likely to be for an interactive session, such as a web page request.

0034By way of example, with reference to <figref idref="DRAWINGS">FIG. 3B</figref>, in the intercept state, once the local TCP connection has been established as between the local LAN device and the terminal node as the destination server/port (e.g., via the process of <figref idref="DRAWINGS">FIG. 3A</figref> through S<b>311</b>), the terminal node continues to process communications via the connection. In one instance, where the TCP connection is for an HTTPS session, the terminal proceeds with the secure sockets layer (SSL) negotiation to establish a secure session (S<b>323</b>). Then, because the terminal node is not the intended destination, the following may occur (S<b>325</b>): (a) the HTTPS sessions will be established; (b) the LAN device browser (e.g., for an interactive webpage) provides a warning message informing the user that the device to which the session is connected is not the original fully qualified domain name (FQDN), sometimes also referred to as an absolute domain name, of the initial request—the FQDN reflects the domain name that specifies an exact location in the tree hierarchy of the Domain Name System (DNS), specifying all domain levels including the top-level domain and the root zone; (c) the LAN device application (e.g., in the case of a non-interactive session or webpage) may terminate the TCP connection. In the event that the TCP connection is terminated in this manner, the terminal node may route a subsequent TCP SYN message from the respective LAN device as normal (S<b>331</b>).

0035For any case where the TCP connection is not terminated (S<b>327</b>), the terminal node then looks for a subsequent GET request from the LAN device for a desired web page (S<b>329</b>). If the terminal node receives another request other than a GET request, it may either terminate the TCP connection and allow it to go through the next time (S<b>333</b>→S<b>331</b>), or route the TCP connection on behalf of the user to the originally intended server (S<b>335</b>). If the terminal node receives a GET request, the terminal node determines whether the respective user-agent string matches one of a plurality of preconfigured strings that correspond to respective browser applications (S<b>337</b>), as opposed to another non-interactive application. For example, each of the different preconfigured strings may correspond to a different browser application (e.g., Internet Explorer, Google Chrome, Mozilla Firefox, etc.), and when the respective user-agent string matches in one of those preconfigured strings it can be determined that the client application of the LAN device is the respective web browser. Although it may be determined that the user-agent string matches that of a preconfigured web browser string, the respective TCP session may not necessarily be an interactive session, but the probability that it is an interactive application is significantly increased based on the determination. If the GET request does not match the user-agent string, then the terminal node may either terminate the TCP connection and allow it to go through the next time (S<b>333</b>S→<b>331</b>), or route the TCP connection on behalf of the user to the originally intended server (S<b>335</b>).

0036On the other hand, if the terminal node determines that the user-agent string matches a one of the preconfigured web browser application strings, then the terminal services the request locally by providing a connection to the local HTTP/HTTPS server or function to provide the respective status-based messaging (S<b>339</b>). By way of example, as discussed above, by means of the Layer 4 Switch <b>207</b>, the terminal node services all packets for the respective TCP connection as if it were the originally addressed destination server/port number. More specifically, the terminal node brings up the TCP connection and connects it to the appropriate listener application for the port. For example, the terminal node services a connection for port <b>80</b> via the local HTTP server or function <b>203</b>, and services a connection for port <b>443</b> via the local HTTPS server or function <b>205</b>. All communications over the respective TCP connection will thereby be between the LAN device (e.g., the terminal <b>112</b>) and the terminal node <b>114</b>, rather than between the LAN device and the originally specified web server over the WAN or Internet. The respective targeted, status-based messaging is then provided via the respective local HTTP/HTTPS server or function of the terminal node.

0037Further, in accordance with another example embodiment, once the intercept is determined as appropriate and the connection is established, instead of routing the connection to the requested site, the terminal node <b>114</b> is configured to implement the connection to a local HTTP or HTTPS server, or an HTTP or HTTPS server application resident in the terminal, for provision of the respective status-based messaging. The HTTP or HTTPS server is configured to provide certain page content that is appropriate for or associated with the state (status-base) for which the intercept has occurred. Accordingly, the respective HTTP or HTTPS server or server application may be programmed to provide a different message page for each state (status-base) for which intercepts are configured. Such a status-based message web page provided for the respective intercepted connection may take any form, such as: (1) informational messaging to educate the user of the state (e.g., network status or user account status); (2) notification of actions for the user to take—e.g., to impact the state; (3) providing references for the user to seek help or access further information regarding the state (e.g., customer service contacts or a self-help webpage); and (4) providing a link to the original IP address or URL to which the user was attempting to access, to facilitate re-initiation of the original request after consuming the information messaging of the terminal-served web page and/or correcting the account or network status on which the intercept was based.

0038<figref idref="DRAWINGS">FIG. 4</figref> illustrates a computer system upon which example embodiments according to the present invention can be implemented. The computer system <b>400</b> includes a bus <b>401</b> or other communication mechanism for communicating information, and a processor <b>403</b> coupled to the bus <b>401</b> for processing information. The computer system <b>400</b> also includes main memory <b>405</b>, such as a random access memory (RAM) or other dynamic storage device, coupled to the bus <b>401</b> for storing information and instructions to be executed by the processor <b>403</b>. Main memory <b>405</b> can also be used for storing temporary variables or other intermediate information during execution of instructions to be executed by the processor <b>403</b>. The computer system <b>400</b> further includes a read only memory (ROM) <b>407</b> or other static storage device coupled to the bus <b>401</b> for storing static information and instructions for the processor <b>403</b>. A storage device <b>409</b>, such as a magnetic disk or optical disk, is additionally coupled to the bus <b>401</b> for storing information and instructions.

0039According to one embodiment of the invention, an approach for reliable and timely provision of targeted, status-based messaging to a user-terminal node in a computer network, such as a wide area resource-based network (e.g., the Internet), in accordance with example embodiments, are provided by the computer system <b>400</b> in response to the processor <b>403</b> executing an arrangement of instructions contained in main memory <b>405</b>. Such instructions can be read into main memory <b>405</b> from another computer-readable medium, such as the storage device <b>409</b>. Execution of the arrangement of instructions contained in main memory <b>405</b> causes the processor <b>403</b> to perform the process steps described herein. One or more processors in a multi-processing arrangement may also be employed to execute the instructions contained in main memory <b>405</b>. In alternative embodiments, hard-wired circuitry is used in place of or in combination with software instructions to implement the embodiment of the present invention. Thus, embodiments of the present invention are not limited to any specific combination of hardware circuitry and software.

0040The computer system <b>400</b> also includes a communication interface <b>417</b> coupled to bus <b>401</b>. The communication interface <b>417</b> provides a two-way data communication coupling to a network link <b>419</b> connected to a local network <b>421</b>. For example, the communication interface <b>417</b> may be a digital subscriber line (DSL) card or modem, an integrated services digital network (ISDN) card, a cable modem, or a telephone modem to provide a data communication connection to a corresponding type of telephone line. As another example, communication interface <b>417</b> may be a local area network (LAN) card (e.g. for Ethernet™ or an Asynchronous Transfer Mode (ATM) network) to provide a data communication connection to a compatible LAN. Wireless links can also be implemented. In any such implementation, communication interface <b>417</b> sends and receives electrical, electromagnetic, or optical signals that carry digital data streams representing various types of information. Further, the communication interface <b>417</b>, for example, includes peripheral interface devices, such as a Universal Serial Bus (USB) interface, a PCMCIA (Personal Computer Memory Card International Association) interface, etc.

0041The network link <b>419</b> typically provides data communication through one or more networks to other data devices. For example, the network link <b>419</b> provides a connection through local network <b>421</b> to a host computer <b>423</b>, which has connectivity to a network <b>425</b> (e.g. a wide area network (WAN) or the global packet data communication network now commonly referred to as the “Internet”) or to data equipment operated by service provider. The local network <b>421</b> and network <b>425</b> both use electrical, electromagnetic, or optical signals to convey information and instructions. The signals through the various networks and the signals on network link <b>419</b> and through communication interface <b>417</b>, which communicate digital data with computer system <b>400</b>, are example forms of carrier waves bearing the information and instructions.

0042The computer system <b>400</b> sends messages and receives data, including program code, through the network(s), network link <b>419</b>, and communication interface <b>417</b>. In the Internet example, a server (not shown) might transmit requested code belonging to an application program for implementing an embodiment of the present invention through the network <b>425</b>, local network <b>421</b> and communication interface <b>417</b>. The processor <b>403</b> executes the transmitted code while being received and/or store the code in storage device <b>239</b>, or other non-volatile storage for later execution.

0043Further, terminology referring to computer-readable media or computer media or the like as used herein refers to any medium that participates in providing instructions to the processor of a computer or processor module or component for execution. Such a medium may take many forms, including but not limited to non-transitory non-volatile media and volatile media. Non-volatile media include, for example, optical disk media, magnetic disk media or electrical disk media (e.g., solid state disk or SDD). Volatile media include dynamic memory, such random access memory or RAM. Common forms of computer-readable media include, for example, floppy or flexible disk, hard disk, magnetic tape, any other magnetic medium, CD ROM, CDRW, DVD, any other optical medium, random access memory (RAM), programmable read only memory (PROM), erasable PROM, flash EPROM, any other memory chip or cartridge, or any other medium from which a computer can read data.

0044Various forms of computer-readable media may be involved in providing instructions to a processor for execution. For example, the instructions for carrying out at least part of the present invention may initially be borne on a magnetic disk of a remote computer. In such a scenario, the remote computer loads the instructions into main memory and sends the instructions over a telephone line using a modem. A modem of a local computer system receives the data on the telephone line and uses an infrared transmitter to convert the data to an infrared signal and transmit the infrared signal to a portable computing device, such as a personal digital assistance (PDA) and a laptop. An infrared detector on the portable computing device receives the information and instructions borne by the infrared signal and places the data on a bus. The bus conveys the data to main memory, from which a processor retrieves and executes the instructions. The instructions received by main memory may optionally be stored on storage device either before or after execution by processor.

0045<figref idref="DRAWINGS">FIG. 5</figref> illustrates a chip set <b>700</b> upon which example embodiments of the present invention may be implemented. Chip set <b>700</b> includes, for instance, processor and memory components described with respect to <figref idref="DRAWINGS">FIG. 5</figref> incorporated in one or more physical packages. By way of example, a physical package includes an arrangement of one or more materials, components, and/or wires on a structural assembly (e.g., a baseboard or printed circuit board) to provide one or more characteristics such as physical strength, conservation of size, and/or limitation of electrical interaction.

0046In one embodiment, the chip set <b>700</b> includes a communication mechanism such as a bus <b>701</b> for passing information among the components of the chip set <b>700</b>. A processor <b>703</b> has connectivity to the bus <b>701</b> to execute instructions/programs and process information stored in, for example, a memory <b>705</b>. The processor <b>703</b> may include one or more processing cores with each core configured to perform independently. A multi-core processor enables multiprocessing within a single physical package, such as two, four, eight, or greater numbers of processing cores. Alternatively or in addition, the processor <b>703</b> may include one or more microprocessors configured in tandem via the bus <b>701</b> to enable independent execution of instructions, pipelining, and multithreading. The processor <b>703</b> may also be accompanied with one or more specialized components to perform certain processing functions and tasks such as one or more digital signal processors (DSP) <b>707</b>, and/or one or more application-specific integrated circuits (ASIC) <b>709</b>. A DSP <b>707</b> typically is configured to process real-time signals (e.g., sound or video) in real time independently of the processor <b>703</b>. Similarly, an ASIC <b>709</b> can be configured to performed specialized functions not easily performed by a general purpose processor. Other specialized components to aid in performing the inventive functions described herein may include one or more field programmable gate arrays (FPGA) (not shown), one or more controllers (not shown), or one or more other special-purpose computer chips.

0047The processor <b>703</b> and accompanying components have connectivity to the memory <b>705</b> via the bus <b>701</b>. The memory <b>705</b> may include both dynamic memory (e.g., RAM) and static memory (e.g., ROM) for storing executable instructions that, when executed by the processor <b>503</b> and/or the DSP <b>507</b> and/or the ASIC <b>509</b>, perform the process of example embodiments as described herein. The memory <b>705</b> may also store the data associated with or generated by the execution of the process.

0048Further, the functionality of the example embodiments of the present invention may be provided by the chip set <b>700</b>, in response to the processor <b>703</b> executing an arrangement of program instructions contained in memory <b>705</b>. Execution of the program instructions contained in memory <b>705</b> causes the processor <b>703</b> to perform the process steps and generate the results described herein, or equivalents thereof. One or more processors in a multi-processing arrangement can also be employed to execute the program instructions. In alternative embodiments, hard-wired circuitry can be used in place of or in combination with software instructions to implement the example embodiments. Thus, embodiments of the present invention are not limited to any specific combination of hardware circuitry and software.

0049Moreover, as will be appreciated, a module or component (as referred to herein) may be composed of software component(s), which are stored in a memory or other computer-readable storage medium, and executed by one or more processors or CPUs of the respective devices. As will also be appreciated, however, a module may alternatively be composed of hardware component(s) or firmware component(s), or a combination of hardware, firmware and/or software components. Further, with respect to the various example embodiments described herein, while certain of the functions are described as being performed by certain components or modules (or combinations thereof), such descriptions are provided as examples and are thus not intended to be limiting. Accordingly, any such functions may be envisioned as being performed by other components or modules (or combinations thereof), without departing from the spirit and general scope of the present invention. Moreover, the methods, processes and approaches described herein may be processor-implemented using processing circuitry that may comprise one or more microprocessors, application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs), or other devices operable to be configured or programmed to implement the systems and/or methods described herein. For implementation on such devices that are operable to execute software instructions, the flow diagrams and methods described herein may be implemented in processor instructions stored in a computer-readable medium, such as executable software stored in a computer memory store.

0050While example embodiments of the present invention may provide for various implementations (e.g., including hardware, firmware and/or software components), and, unless stated otherwise, all functions are performed by a CPU or a processor executing computer executable program code stored in a non-transitory memory or computer-readable storage medium, the various components can be implemented in different configurations of hardware, firmware, software, and/or a combination thereof. Except as otherwise disclosed herein, the various components shown in outline or in block form in the figures are individually well known and their internal construction and operation are not critical either to the making or using of this invention or to a description of the best mode thereof.

0051In the preceding specification, various embodiments have been described with reference to the accompanying drawings. It will, however, be evident that various modifications may be made thereto, and additional embodiments may be implemented, without departing from the broader scope of the invention as set forth in the claims that follow. The specification and drawings are accordingly to be regarded in an illustrative rather than restrictive sense.